[PATCH 0/2] RISC-V: validate ACPI MADT entries before use

[Jiale Yao]

RISC-V ACPI initialization passes generic MADT subtable headers to
RINTC, PLIC, and APLIC parsers.  These parsers currently access fields
from the fixed-size records before establishing that firmware supplied
the complete structure.  A truncated MADT entry can therefore cause an
out-of-bounds read during early interrupt and CPU setup.

Validate each typed record before its first field access.  The first
patch fixes the CPU RINTC parser and the second covers the PLIC and APLIC
interrupt-controller parsers.

Jiale Yao (2):
  riscv: validate RINTC entries before use
  ACPI: riscv: validate interrupt controller MADT entries

 arch/riscv/kernel/smpboot.c | 6 +++---
 drivers/acpi/riscv/irq.c    | 6 ++++++
 2 files changed, 9 insertions(+), 3 deletions(-)

-- 
2.34.1